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Abstract of WO 03094438 (A1 ) 

The invention refers to a system, apparatus and 

method for carrying out a SIM-based authentication v • 

of a user accessing a WLAN, without having /' \ ^ w % 

provided yet an IP connectivity, along with a layer-2 ; ... "\ 
encryption mechanism for protecting the path ;'{' V''';' 

between the Terminal Equipment and the Mobile \ 
network.Therefore, the invention provides a method \ I 

for establishing a PPP-tunnelling for AKA dialogues \ 5 

between the terminal and an Access Controller for ^ 
accessing the mobile network owning the SIM.The \ 
invention also provides an Access Controller (AC) ■ '*< 

comprising a Point-to-Point over Ethernet (PPPoE) r .\_... 
server for tunnelling AKA dialogues form a PPP- i j 'S.v 

client installed in the terminal for the same purpose, I i: L.'™ 

and also comprising a Traffic Router and a RADIUS t i \ \ '>»•• 

-client. The AC thus including a RADIUS-client is [V,"j ji 

interposed between a RADI US-proxy accessed I ""{ \ ' "; 

from the access points (AP) in the WLAN and the I \ — — ™ \ 

mobile network where SIM-based authetication is .1 ! , " : V 

carried out. \ * . 
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(57) Abstract: The invention refers to a system, appara- 
tus and method for carrying out a SIM-based authentication 
of a user accessing a WLAN, without having provided yet 
an IP connectivity, along with a layer-2 encryption mech- 
anism for protecting the path between the Terminal Equip- 
ment and the Mobile network/Therefore, the invention pro- 
vides a method for establishing a PPP-tunnelling for AKA 
dialogues between the terminal and an Access Controller 
for accessing the mobile network owning the SIMThe in- 
vention also provides an Access Controller (AC) compris- 
ing a Point-to-Point over Ethernet (PPPoE) server for tun- 
nelling AKA dialogues form a PPP-client installed in the 
terminal for the same purpose, and also comprising a Traf- 
fic Router and a RADIUS-client. The AC thus including 
a RADIUS-client is interposed between a RADFJS-proxy 
accessed from the access points (AP) in the WLAN and the 
mobile network where SIM-based authetication is carried 
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SYSTEM, APPARATUS AND METHOD FOR SIM-BASED 
AUTHENTICATION AND ENCRYPTION IN WIRELESS LOCAL 
AREA NETWORK ACCESS 

FIELD OF THE INVENTION 

5 [0001] The present invention generally relates to 
authentication and encryption mechanisms in Wireless Local 
Area Network scenarios. More particularly, the invention 
pertains to means, system and methods for a SIM-based 
authentication and a layer-2 encryption mechanisms for 
10 protecting the communication path from the Terminal 
Equipment onwards . 

BACKGROUND 

[0002] In 1999, the specification 802.11b was published by 
the IEEE for Wireless Local Area Network (WLAN) access at 
15 rates of 11 Mbps . This standard has become widely supported 
by the industry and has a huge installed base in enterprise 
companies, as well as publicly accessible hot spots such as 
airports, hotels, cafes and so on. 

[0003] This specification 802.11b offers to some extent 
20 authentication and access control mechanisms as well as 
confidentiality, but only in the wireless path. In this 
respect, two authentication methods are defined in this 
standard, namely "Open System" and "Shared Key". 

[0004] When the Open System is used, a WLAN card in the 
25 Terminal Equipment (TE) announces that it wants to 
associate to a WLAN Access Point (hereinafter abbreviated 
as AP) . No authentication is performed and only some basic 
access control mechanisms are used like, for instance, 



WO 03/094438 PCT/EP02/04865 

2 

Media Access Control (MAC) filters and Service Set 
Identifiers (SSID) . 

[0005] These MAC filters are arranged for working so that 
only WLAN cards whose MAC address belongs to a list kept by 
5 the AP, such as an Access Control List (ACL) , are allowed 
to associate to the AP. This access control mechanism has a 
limited utility, since the identity of the entity trying to 
associate does not actually belong to a user, but rather to 
the equipment itself. If a terminal or card is stolen, 

10 there is no user-based authentication to prevent access to 
the resources by the stolen equipment. Furthermore, as the 
MAC addresses of the WLAN card always appear in the headers 
of the WLAN frames, MAC-address spoofing is a trivial 
attack. This is of a special relevance since most of the 

15 WLAN cards in the market can change its MAC address just by 
using software means. 

[0006] The other access control mechanism is the 
aforementioned Service Set Identifier (SSID) , which is an 
alphanumeric code that identifies the instance of the WLAN 

20 that the Terminal Equipment (TE) is trying to associate. A 
given AP only allows the association of WLAN cards that 
provide a right SSID. However, as this identifier is 
usually broadcast by the AP's, and even without changing 
the default value set by the vendor, this access control 

25 mechanism is, again, rather useless since a plurality of 
well known attacks may occur. 

[0007] A second authentication method mentioned above is 
the so-called Shared Key. This procedure is embedded in a 
basic confidentiality mechanism provided by the Wired 
30 Equivalent Privacy (WEP) standard, which is a symmetric 
encryption algorithm based on RC4. The authentication as 
such is performed by using a challenge-response mechanism 
in which both parties, the WLAN card and the AP, show to 
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own a same key. However, this key is installed and stored 
in the Terminal Equipment (TE) , and hence it suffers from 
the same disadvantages as described when talking about MAC 
filters. 

5 [0008] Moreover, a number of recently published papers 
have shown the fundamental flaws of the privacy mechanism 
itself, that is, the flaws of WEP standards. Those flaws 
begin with the use of static WEP keys, what allows an 
attacker to find out the keys themselves, since the 
10 initialisation vectors of the algorithms are sent in the 
clear within the WEP frame. A number of passive attacks, 
like for example a WLAN card that only sniffs the traffic, 
allow also to deduce the keys. 

[0009] At the beginning, it seemed that just by refreshing 
15 the keys with a better key management, and by increasing 
their length, for example from 40 to 128 bits, the 
algorithm could be safer or, at least, safe enough to 
achieve an acceptable security. However, more and more 
recent reports have proven that the algorithm design as 
20 such cannot provide an acceptable security level. 

[0010] Nowadays, efforts are made by the industry and 
representative fora to solve the flaws in the presently 
applicable standards. The IEEE is currently defining a new 
standard to improve the authentication mechanisms of the 

25 existing 802.11b, and the results may be published as a so- 
called 802. lx standard, a "Port-Based Network Access 
Control", but this work is not finished yet. Moreover, this 
approach only takes into account authentication, so that a 
proper confidentiality algorithm is still needed. In this 

30 respect, current trends suggest that a protocol based in 
the so-called Advanced Encryption System (AES) protocol may 
replace WEP. Nevertheless, the port-based authentication 
mechanism as suggested in 802. lx has a significant impact 
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on the TE operating system and in the AP' s applicable 

software, since 802. Ix just seeks a replacement for the 

authentication mechanism based on WEP, and the WEP itself. 

[0011] In a short term, a massive adoption of this new 
5 standard 802. lx, with the still unresolved flaws above, 
will lead to new investments in WLAN equipment, since all 
the AP's of a given WLAN would have to be replaced or, at 
least, upgraded. Additionally, and somewhat obvious, any 
WLAN confidentiality mechanism only provides protection on 
10 the wireless path, that is, between the WLAN card and the 
AP. However, the corresponding Ethernet traffic beyond the 
AP is not encrypted at all. 

[0012] It is therefore an important object of the present 
invention at this stage the provision of means and methods 
15 for allowing an effective authentication mechanism of WLAN 
users as well as a complete encryption mechanism throughout 
the whole communication path starting from the Terminal 
Equipment of said users. 

RELATED ART 

20 [0013] In short, and as widely described above, the 
Authentication in currently WLAN applicable standards, 
namely 802.11, is either non-existent, or device-based when 
the physical MAC address of the WLAN card is used for 
authenticating the TE. This is apparently unfeasible for 

25 large deployments given that an encryption achieved through 
the WEP protocol like in WLAN, which is known for its 
weaknesses, is not found from different sectors appropriate 
for maintaining an acceptable security. 

[0014] By way of contrast, authentication in conventional 
30 and newer public land mobile networks like GSM, GPRS, or 
UMTS is done by means of a SIM card and a set of security- 
proved protocols and algorithms known as "Authentication 
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and Key Agreement" (hereinafter abbreviated as AKA) 
algorithms. A so-called SIM-based authentication is user- 
based since a SIM is designed for personal use, and 
protected by an access PIN. 

5 [0015] Nowadays, mobile operators want to extend their 
offering in access networks by including broadband access, 
and the WLAN technology makes it possible with access rates 
up to 11 Mbps, while keeping an extremely low deployment 
cost, mostly due to the use of unlicensed spectrum band in 
10 WLAN. A mobile operator can achieve this by installing 
their own WLAN or by signing agreements with existing WLAN 
operators, but in either case, the security requirements 
should be at least as strong as in the case of a mobile 
access to the operators core network. 

15 [0016] To achieve this, a WLAN operator must offer an 
authentication and encryption mechanism that implies the 
possession of a SIM card. This SIM card must be issued by 
the mobile operator and can be the same SIM used for mobile 
access, or can be a SIM issued on purpose for WLAN access 

20 only. 

[0017] A conventional WLAN operated by a third party can 
also have its own local users, and the authentication to be 
performed for said local is completely up to the WLAN 
operator. For instance, this authentication for local users 

25 might be just based on user identity plus password, or even 
no security at all. However, for those users that are 
subscribed to a mobile operator, the authentication and 
other security issues through said WLAN should be 
comparable to the ones in the mobile operator's network. On 

30 the other hand, a WLAN deployed and operated only by a 
mobile operator should deny access to users not belonging 
to that mobile operator, and should only implement 
authentication mechanisms based on a SIM card. 
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[0018] Nevertheless, any attempt to introduce new and 
safer mechanisms for authentication and encryption in WLAN 
must be aimed to produce as less impacts as possible in 
current WLAN scenarios. 

5 [0019] A quite interesting attempt to solve the problems 
above is described in the US application publication 
2002/0009199 with title "Arranging Data Ciphering in a 
Wireless Telecommunication System". The teaching behind 
this application also presents a SIM-based authentication 
10 scheme. 

[0020] This SIM-based authentication scheme is, however, 
intended to derive a ciphering key that is used as the key 
of the 802.11 native WEP algorithm for traffic encryption 
between the TE and the AP. The main advantage that this 

15 application introduces over the existing WEP capabilities 
is the addition of a new mechanism for renewing the keys 
once per session. Apart from that, this application is 
basically a modified version of the current WEP standards 
and does not solve the fundamental problems stated above 

20 for the original WEP version. 

[0021] Nevertheless, different sectors in the industry 
have assessed that well known WEP attacks can guess a WEP 
key in less than two hours. Obviously, if the WEP key is 
static and never renewed, as in the original WEP version, 

25 the problem is much more significant. Consequently, with 
the approach presented in US 2002/0009199 the problem is 
restricted to the limits of the duration of a given session 
and, if a session expands over few hours, the same problem 
as before arises. This is clearly insufficient for granting 

30 similar security levels to those found in current public 
land mobile networks. 

[0022] In this respect, it is an object of the present 
invention the achievement of a much higher security level 
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allowing the operator to choose an encryption algorithm 
that better suites their security needs. Notice that there 
is usually a trade-off between security level and 
performance. Therefore, additional features like supporting 
5 keys with a length of 128, 168, 256 bits, etc.; as well as 
supporting the latest most secure algorithms, like AES for 
instance, and a key rotation procedure may be considered 
another object of the present invention. 

[0023] Moreover, in accordance with this application 
10 above, US 2002/0009199, the encrypted path goes from the 
Mobile Terminal to the AP, since WEP is only applicable to 
the radio path. In this respect, the support for an 
encryption path to be established beyond the AP, and 
covering also the wired part of the WLAN, is a further 
15 object of the present invention. 

[0024] Furthermore, US 2002/0009199 teaches that the 
assignment of an IP address is done before running the 
authentication process, and hence, a malicious user can 
potentially initiate a whole set of well-known attacks. 

20 However, if a user had no means to get IP connectivity 
before having been effectively authenticated, the risk 
would decrease greatly. Thereby, it is a further object of 
the present invention the provision of an authentication 
mechanism for a user to be carried out before giving IP 

25 connectivity to said user. 

[0025] In summary, an important object of the present 
invention is the provision of a system, means and methods 
for allowing an effective SIM-based user authentication and 
for establishing a complete encryption path, starting from 
30 the TE, for WLAN users who are subscribers of a public land 
mobile network. Another particularly important object is 
that this SIM-based user authentication might be performed 
before giving IP connectivity to said user. 
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[0026] A further object of the present invention is the 
support of keys of variable length, the use of security 
algorithms at operator choice, and provision of a key 
rotation procedure. 

5 [0027] A still further object of the present invention is 
the achievement of the previous objects with a minimum 
impact on conventional WLAN scenarios . 

SUMMARY OF THE INVENTION 

[0028] The objects of the invention are achieved with a 
10 method for allowing a SIM-based authentication to users of 
a wireless local area network who are subscribers of a 
public land mobile network by means of a data link layer 
(layer-2) authentication mechanism. An important aspect of 
this method is that the IP connectivity is only provided to 
15 the user when the authentication process has been 
successfully completed. 

[0029] The objects of the invention are thus achieved with 
a method wherein a wireless terminal finds an accessible 
Access Point and requests association to the wireless local 
20 area network, and the Access Point accepts the request for 
that. The wireless terminal then initiates the discovering 
of an Access Controller interposed between the Access Point 
and the public land mobile network. 

[0030] Then, the wireless terminal sends the user 
25 identifier immediately on top of a Point-to-Point layer 2 
protocol toward the Access Controller which shifts the user 
identifier received on top of a Point-to-Point layer 2 
protocol upwards to an authentication protocol residing at 
application layer. 



30 [0031] Following, the Access Controller sends the user 
identifier toward an Authentication Gateway at the public 
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land mobile network to initiate an authentication 
procedure. 

[0032] Once, the authentication process is starting the 
Access Controller receives an authentication challenge from 
5 the public land mobile network via the Authentication 
Gateway; and shifts the authentication challenge received 
on the same protocol at application layer downwards on top 
of the Point-to-Point layer 2 protocol. The authentication 
challenge is sending by the Access Controller toward the 
10 wireless terminal for deriving an authentication response. 

[0033] Then, the wireless terminal can send the 
authentication response immediately on top of a Point-to- 
Point layer 2 protocol toward the Access Controller which 
shifts the authentication response received on top of a 

15 Point-to-Point layer 2 protocol upwards to the 
authentication protocol at application layer. The 
authentication response is sending toward the 
Authenti cation Gateway from the Access Controller that 
receives an encryption key from the public land mobile 

20 network via the Authentication Gateway. 

[0034] Following, the Access Controller extracts the 
encryption key received on the protocol at application 
layer for further encryption of communication path with the 
wireless terminal; and the Access Controller sends an 
25 assigned IP-address and other network configuration 
parameters toward the wireless terminal. 

[0035] This provides the advantages that the mobile 
terminal adds security authentication mechanism, similar to 
the ones used in radio communication network, in overall 
30 communication path, this means that it obtains 
confidentiality in wireless path and in wire path. The 
operators can extend their access networks, offering 
localized broadband access (11 Mbps) at a very low cost. 
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[0036] Also for accomplishing the objects of the present 
invention there is provided an Access Controller that 
comprises a Point-to-Point server residing at an OSI layer- 
2 for communicating with the wireless terminal; and an 
5 authentication protocol residing at an OSI application 
layer for communicating with the public land mobile 
network. Moreover, this Access Controller further comprises 
means for shifting the information received on top of the 
Point-to-Point layer-2 protocol upwards to an appropriate 
10 authentication protocol residing at application layer. 
Likewise, the Access Controller also comprises means for 
shifting the information received on the authentication 
protocol residing at application layer downwards on top of 
the Point-to-Point layer 2 protocol. 

15 [0037] In order to fully accomplish the objects of the 
invention, it is also provided a wireless terminal 
comprising functionality for acting as a Point-to-Point 
layer 2 protocol client and having an Extensible 
Authentication Protocol on top of this Point-to-Point layer 

20 2 protocol. 

[0038] The overall solution provided by the invention 
results in a telecommunication system comprising a wireless 
local area network that includes at least one Access Point, 
a public land mobile network, at least one wireless 
25 terminal as above, and the Access Controller above. 

BRIEF DESCRIPTION OF DRAWINGS 

[0039] The features, objects and advantages of the 
invention will become apparent by reading this description 
in conjunction with the accompanying drawings, in which: 

30 [0040] FIG. 1 represents a preferred embodiment of how a 
user of a conventional mobile network accessing through a 
WLAN, which can be accessed by mobile and non-mobile users, 



WO 03/094438 PCT/EP02/04865 
11 

may be authenticated by his own mobile network and may have 
an encrypted path from the TE to his own mobile network. 

[0041] FIG. 2 presents a simplified architecture compared 
to the one in Fig. 1, and applicable to a WLAN accessed 
5 only by users of a public land mobile network. 

[0042] FIG. 3 schematically shows an embodiment of an 
Access Controller comprising a PPPoE Server and a RADIUS 
Client wherein the Extensible Authentication Protocol 
resides . 

10 [0043] FIG. 4 basically shows an exemplary sequence of 
actions carried out from the TE to the mobile network and 
throughout the WLAN entities to perform a SIM-based user 
authentication. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

15 [0044] The following describes currently preferred 
embodiments of means, methods and system for allowing an 
effective SIM-based user authentication and for 
establishing a complete encryption path starting from the 
TE for WLAN users who are subscribers of a public land 

20 mobile network. In accordance with an aspect of the present 
invention, this SIM-based user authentication is performed 
before having given IP connectivity to said user. 

[0045] Therefore, an overall sketch of a preferred 
embodiment is presented in Fig. 1, showing a general 

25 scenario where subscribers of a public land mobile network 
(GSM/GPRS/UMTS), as well as other local non-mobile users, 
access a wireless local area network (WLAN) . This general 
scenario in Fig. 1 proposes a particularly simple 
architecture aimed to minimise the impacts on an existing 

30 conventional WLAN in order to accomplish one of the objects 
of the present invention. This rather simple architecture 
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involves different entities from a WLAN and from a public 
land mobile network, which are described following this. 
Moreover, Fig. 2 presents an even more simplified 
architecture in accordance with another embodiment of the 
5 present invention for a WLAN giving access only to 
subscribers of a public land mobile network and without 
local WLAN users. 

[0046] A first entity in Fig. 1 and 2 is the Terminal 
Equipment (TE) , that is equipped with the necessary 

10 hardware and software to interface the user's SIM card as 
well as to send and receive the required signalling 
information according to the Authentication and Key 
Agreement (AKA) protocol. The TE also includes the 
necessary software to implement a Point-to-Point Protocol 

15 over Ethernet (PPPoE) protocol, client side, accordingly 
with RFC 2516. 

[0047] The inclusion of such PPPoE client allows the 
establishment of a Point-to-Point Protocol (PPP) session 
with a specific server in the WLAN domain. This is a very 

20 convenient embodiment in order to leverage on existing 
authentication mechanisms, for instance the Extensible 
Authentication Protocol (EAP) , and on encryption protocols, 
like the PPP Encryption Control Protocol (hereinafter 
referred to as "PPP encrypted") according to RFC 1968, that 

25 extends the encryption path along the wired part of the 
WLAN, thus offering a much higher security level. A 
component like this PPPoE Client is a core part for the 
proposed solution. 

[0048] Other entities in the scenarios in Fig. 1 and 2 are 
30 the Access Points that behave as plain standard radio 
stations according to the standard 802.11b, without any 
additional logic. Unlike other possible solutions, as 
explained in respect of the coming standard 802. lx, the 
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approach offered by the present invention allows the reuse 
of the cheap existing hardware instead of having to replace 
or upgrade all AP's present in the WLAN. These unchanged 
AP' s might run in this scenario with WEP support turned 
5 off, since such WEP offers by itself a little security 
compared to the security mechanisms that are implemented on 
top of the PPPoE layer. 

[0049] In accordance with an aspect of the present 
invention, there is provided a new entity, the Access 
Controller (hereinafter referred to as AC) in both Fig. 1 
and 2 that comprises the required PPPoE server 
functionality. This PPPoE server is automatically 
discovered by the Terminal Equipment (TE) , by means of a 
built-in mechanism in the PPPoE protocol, namely through a 
handshake initiated by a broadcast message. This Access 
Controller (AC) also comprises a RADIUS client 
functionality that has the responsibility of gathering 
client credentials, received through EAP attributes carried 
on top of a PPP, and sending them toward a conventional 
WLAN Authentication Server (WLAN -AS ) , also through EAP 
attributes carried now on top of RADIUS messages. A 
component like this Access Controller (AC) is also a core 
part for the purpose of the present solution. 

[0050] Both the Access Controller and the aforementioned 
25 PPPoE client, which is embedded in the Terminal Equipment, 
are co-operating entities intended for tunnelling a 
challenge-response authentication procedure as well as for 
establishing an encrypted path. 

[0051] A further entity present only in the most general 
30 scenario shown in Fig. 1 is a WLAN-Authentication Server 
( WLAN -AS ) that implements the functionality of a local 
authenticator server for local WLAN users, not belonging to 
the mobile operator, and who may be thus authenticated by 



15 
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other means such as a plain user and password matching. 
This WLAN-AS also plays the role of a RADIUS proxy, when 
receiving authentication messages from the Access 
Controller and forwards them toward an Authentication 
5 Gateway (hereinafter referred to as AG) in the public land 
mobile network operator's domain. 

[0052] The WLAN-AS is only required for the purpose of the 
present invention in order to authenticate own WLAN users 
who are not mobile subscribers of the public land mobile 

10 network. Consequently, a WLAN intended for giving access 
only to subscribers of a mobile network may get rid of such 
entity without affecting the authentication of said mobile 
subscribers and the establishment of an encrypted path, 
scope of the present invention. In this respect, Fig. 2 

15 presents an embodiment of a simplified architecture for a 
WLAN giving access only to subscribers of a public land 
mobile network as explained above wherein the WLAN-AS is 
thus not included. 

[0053] A still further entity included in the scenarios of 
20 Fig. 1 and 2 is the Authentication Gateway (hereinafter 
referred to as AG) alone or likely in co-operation with a 
Home Location Register (HLR) for storing mobile subscribers 
user data. This Authentication Gateway (AG), alone or in 
combination with an HLR, act as authentication backend 
25 servers inside the operator' s domain, and are in charge of 
generating authentication vectors according to the AKA 
protocol for conventional and newer public land mobile 
networks such as GSM, GPRS and UMTS. These components, 
namely AG and HLR, can be physically separate entities 
30 which communicate each other by the Mobile Application Part 
(MAP) protocol, or they can be a single logical entity 
acting as a RADIUS server and with the subscriber database 
built-in, together with the implementation of the necessary 
algorithms in AKA, such as the well-known A5, A8 and so on. 
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In the latter approach, the communication toward an HLR is, 
hence, not needed as exemplary illustrated in Fig. 2. 

[0054] In short, the Access Controller, the aforementioned 
PPPoE client, which is embedded in the Terminal Equipment, 
5 and this Authentication Gateway are the core entities for 
the purpose of the present invention. The particular 
description for the functions residing in such entities is 
merely illustrative and in non-restrictive manner. 

[0055] Fig. 3 shows different protocol layers involved in 
10 an Access Controller (AC) with reference to the Open System 
Interconnection (OSI) model. The PPPoE server, residing 
underneath an IP layer, comprising a PPPoE protocol layer 
that naturally resides over an Ethernet layer, and having 
embedded the aforementioned EAP. Likewise, the RADIUS 
15 client having a RADIUS protocol layer having embedded the 
EAP, residing over an UDP layer, both residing over an IP 
layer. 

[0056] On the other hand, the manner in which the 
different elements carry out some aspects of the present 
20 invention accordingly with currently preferred embodiments 
is described below with reference to the sequence of 
actions depicted in Fig. 4. 

[0057] The aforementioned Terminal Equipment (TE) is 
equipped with a Mobile Terminal Adapter (MTA) that allows 
25 the access to a SIM card carried by a mobile terminal. This 
TE has a transceiver for communicating (C-401, C-402) with 
an AP of the WLAN, and includes the appropriate software 
stack to implement the PPPoE protocol in accordance with 
the RFC 2516. 

30 [0058] The Access Controller (AC) has a PPPoE server 
embedded. The discovery of the PPPoE server by the PPPoE 
client is an integral part of the protocol itself (C-403, 
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C-404, C-405, C-406). The identity used by the TE on the 
PPP link (C-407, C-408) is a Network Access Identifier 
(NAI) , which is entered by the user for establishing 
required dial-up sessions, and whose realm is used to 
5 identify the user as a subscriber of a given mobile 
operator. No password is needed since the authentication is 
done by other means. Alternatively, instead of sending a 
NAI, the IMSI could be fetched from the SIM card and sent 
as the user identity. This should only be used if sending 
10 the IMSI in clear-text is acceptable, which might not be 
the case. 

[0059] Having received the user identity with help of EAP 
mechanisms, the Access Controller (AC) has a RADIUS client 
for sending (C-409) authentication messages to the WLAN-AS 
server. The Extensible Authentication Protocol (EAP) is run 
on top of PPP and RADIUS, in order to carry authentication 
information between the TE and the AG. The authentication 
mechanism to be used inside EAP may be the conventional AKA 
used in public land mobile networks. As already mentioned 
above, the WLAN-AS acts as an authentication server for 
regular WLAN users, whose authentication is not SIM-based, 
and as an authentication proxy for those users whose realm 
part of the NAI identifies them as subscribers of a mobile 
network thus using a SIM-based authentication. Then, when 
acting as an authentication proxy, the WLAN-AS forwards (C- 
410) the received authentication messages to the 
Authentication Gateway (AG) . 

[0060] When the Authentication Gateway receives (C-410) an 
authentication request, asks the HRL for an authentication 
30 vector (C-411), triplet or quintet, by using a MAP 
interface. For this task, the Authentication Gateway (AG) 
has to know the IMSI of the subscriber whose NAI have been 
sent in the RADIUS message. This IMSI may be discovered by 
lookup in a directory database, for instance. The HLR 
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answers back with the requested authentication information 
(C-412) for the user. 

[0061] Then, the AG encapsulates the RAND component of the 
authentication vector in an EAP attribute and sends it back 
through the WLAN-AS (C-413) toward the AC (C-414) inside a 
RADIUS message. Notice that for user of newer mobile 
networks like UMTS, the sending of a message like AUTN 
might also be required. 

[0062] The AC then forwards (C-415) the received EAP 
information to the TE in a PPP message. Notice that the AC 
behaves here as a "passthrough" of EAP information between 
"carrier" protocols such as PPP and RADIUS. 

[0063] When the TE receives the EAP information, extracts 
the RAND number and uses it to challenge the SIM and 
generate an answer (RES), that is sent back (C-416, C-417, 
C-418) to the AG via EAP transmitted over PPP and RADIUS 
again. As before, for UMTS users the TE first authenticates 
the network, based on the AUTN . At this stage, it has to be 
noticed that the TE generates the encryption key following 
the standard algorithms defined in AKA. This key is used as 
a seed, namely keying material, to derive one or multiple 
session keys to be used with the PPP Encryption Control 
Protocol stated in RFC 1968, and any of the existing PPP 
encryption algorithms, for instance, the PPP triple-DES 
encryption protocol, RFC 2420. 

[0064] The AG receives (C-418) the EAP response and checks 
the validity of the challenge. The AKA encryption key (Kc) 
had been received previously in the authentication vector 
from the HLR likely in co-operation with an Authentication 
Centre (AuC) not depicted. The AG communicates then the AKA 
encryption key (Kc) to the AC (C-419, C-420) where the 
PPPoE server resides. This may be done in an Access-Accept 
RADIUS message where the EAP-Success is transmitted, but 
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since this EAP command cannot carry any additional data, a 
RADIUS Vendor Specific Attribute (VSA) may be a more 
valuable option. 

[0065] At this stage, the AC receives (C-420) an Access- 
Accept RADIUS message and requests an IP address from a 
Dynamic Host Configuration Protocol (DHCP) server, this IP 
address to be further sent to the TE. The AC follows the 
same algorithm as the TE to derive session keys from the 
AKA encryption key (Kc) to be used with the PPP Encryption 
Control Protocol and the chosen PPP encryption algorithm 
(3DES, for instance) . The AC eventually sends (C-421) the 
EAP-success message to the TE, together with other 
configuration parameters destined to said TE, such as an IP 
address, an IP net mask, DNS servers, and so on. Then, the 
PPP link is fully established and ready to enter the 
network phase. 
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A method in a telecommunication system for allowing a 
SIM-based authentication to users of a wireless local 
area network who are subscribers of a public land 
mobile network, the method comprising the steps of a 
wireless terminal finding an accessible Access Point 
and requesting association to the wireless local area 
network, and the Access Point accepting the request, 
the method characterized in that it further comprises 
the steps of: 

(a) interposing an Access Controller between the Access 
Point and the public land mobile network; 

(b) discovering the Access Controller from at least one 
wireless terminal provided with a SIM card and 
adapted for reading user data thereof; 

(c) carrying out a challenge-response authentication 
procedure between the wireless terminal and the 
public land mobile network through the Access 
Controller without having provided yet IP 
connectivity to the user, the challenge-response 
authentication submissions carried: 

- on top of a Point-to-Point layer 2 protocol 
between the wireless terminal and the Access 
Controller; and 

- on an authentication protocol residing at 
application layer between the public land 
mobile network and the Access Controller; and 

(d) offering IP connectivity to the user at the 
wireless terminal, by sending an assigned IP 
address and other network configuration parameters, 
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once said user has been validly authenticated by 
the public land mobile network. 

2. The method in claim 1, wherein the step c) of carrying 
out the challenge-response authentication procedure 
include the steps of: 

(cl) sending a user identifier from the wireless 
terminal to the public land mobile network 
through the Access Controller; 

(c2) receiving an authentication challenge at the 
wireless terminal from the public land mobile 
network via the Access Controller; 

(c3) deriving encryption key and authentication 
response at the wireless terminal from the 
received challenge; 

(c4) sending the authentication response from the 
wireless terminal to the public land mobile 
network through the Access Controller; 

(c5) receiving at the Access Controller an 
encryption key from the public land mobile 
network; and 

(c6) extracting the encryption key received for 
further encryption of communication path with 
the wireless terminal. 

3. The method in claims 1 or 2, further comprising the 
step of shifting authentication information received on 
top of a Point-to-Point layer 2 protocol upwards to an 
authentication protocol residing at application layer 
for submissions toward the public land mobile network. 



The method in claim 3, further comprising the step of 
shifting authentication information received on an 
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authentication protocol residing at application layer 
downwards on top of a Point-to-Point layer 2 protocol 
for submissions toward the wireless terminal. 

5. The method in claim 1, further comprising the step of 
establishing at the wireless terminal a symmetric 
encryption path by using the previously derived 
encryption keys at the Access Controller and wireless 
terminal . 

6. The method in any preceding claim, wherein the step d) 
of sending an IP address includes a previous step of 
requesting such IP address from a Dynamic Host 
Configuration Protocol server. 

7. The method in any preceding claim, wherein the 
communication between the Access Controller and the 
public land mobile network goes through an 
Authentication Gateway of said public land mobile 
network. 

8. The method in any preceding claim, wherein the 
communication between the Access Controller and the 
Authentication Gateway of a public land mobile network 
goes through an Authentication Server of the wireless 
local area network in charge of authenticating local 
users of said wireless local area network who are not 
mobile subscribers. 

9. The method in any preceding claim, wherein the user 
identifier in step cl) comprises a Network Access 
Identifier. 



10 . The method in any preceding claim, wherein the user 
identifier in step cl) comprises an International 
30 Mobile Subscriber Identity. 
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11. The method in any preceding claim, wherein the 
authentication protocol residing at application layer 
in step c) is an Extensible Authentication Protocol. 

12. The method in claim 11, wherein this Extensible 
Authentication Protocol is transported over a RADIUS 
protocol . 

13. The method in claim 11, wherein this Extensible 
Authentication Protocol is transported over a Diameter 
protocol . 

14. An Access Controller in a telecommunication system that 
comprises a wireless local area network including at 
least one Access Point, a public land mobile network, 
and at least one Terminal Equipment provided with a SIM 
card and adapted for reading subscriber data thereof, 
the Access Controller characterized in that it 
comprises : 

(a) a Point-to-Point server residing at an OSI layer 2 
for communicating with the wireless terminal; and 

(b) an authentication protocol residing at an OSI 
application layer for communicating with the public 
land mobile network. 

15. The Access Controller in claim 14 further comprising: 

(a) means for shifting the information received on top 
of the Point-to-Point layer 2 protocol upwards to 
the authentication protocol residing at application 
layer; and 

(b) means for shifting the information received on the 
authentication protocol residing at application 
layer downwards on top of the Point-to-Point layer 
2 protocol. 
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16. The Access Controller in claim 15 further comprising 
means for requesting an IP address from a Dynamic Host 
Configuration Protocol server, after a user has been 
successfully authenticated by his public land mobile 
network. 

17. An Access Controller according to claim 16 adapted for 
communicating with a wireless terminal via an Access 
Point . 

18. An Access Controller according to claim 16 adapted for 
communicating with a public land mobile network via an 
Authentication Gateway. 

19. An Access Controller according to claim 16 adapted for 
communicating with an Authentication Gateway via an 
Authentication Server responsible for authenticating 
local users of a wireless local area network. 

20. An Access Controller according to any of claims 14 to 
19, wherein the authentication protocol residing at 
application layer is an Extensible Authentication 
Protocol. 

21. The Access Controller in claim 20, wherein this 
Extensible Authentication Protocol is transported over 
a RADIUS protocol. 

22. The Access Controller in claim 20, wherein this 
Extensible Authentication Protocol is transported over 
a Diameter protocol. 

23. A wireless terminal comprising functionality for acting 
as a Point-to-Point layer 2 protocol client and having 
an Extensible Authentication Protocol on top of this 
Point-to-Point layer 2 protocol. 
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24. A telecommunication system comprising a wireless local 
area network that includes at least one Access Point, a 
public land mobile network, and at least one Terminal 
Equipment provided with a SIM card and adapted for 
reading subscriber data thereof, characterized in that 
it further comprises the Access Controller in claims 14 
to 22 for allowing SIM-based subscriber authentication 
to users of the wireless local area network who are 
subscribers of the public land mobile network. 
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